Blue Coat BCAAA Stack Buffer Overflow Vulnerability

Bugtraq ID:	47618
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 28 2011 12:00AM
Updated:	Jul 11 2011 09:00AM
Credit:	Paul Harrington
Vulnerable:	Blue Coat Systems Proxysg 6.1 Blue Coat Systems Proxysg 5.4 Blue Coat Systems Proxysg 5.3 Blue Coat Systems Proxysg 4.3 Blue Coat Systems ProxyOne 0
Not Vulnerable:	Blue Coat Systems Proxysg 5.5.5 1

Blue Coat BCAAA Stack Buffer Overflow Vulnerability

Blue Coat BCAAA is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Blue Coat BCAAA Stack Buffer Overflow Vulnerability

The following proof-of-concept and exploit are available:

• /data/vulnerabilities/exploits/47618.py
• /data/vulnerabilities/exploits/47618.rb

Blue Coat BCAAA Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Blue Coat BCAAA Stack Buffer Overflow Vulnerability

References:

• Blue Coat Systems Homepage (Blue Coat Systems)
  
• NGS00060 Technical Advisory: Blue Coat BCAAA Remote Code Execution Vulnerabilit ("Research@NGSSecure" )
  
• Blue Coat Security Advisory - Stack overflow in BCAAA (Blue Coat)